Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.mft
File:                     D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.mft (raw, json)
Hash identifier:          /Qa/PYLrLRRZDdYL0FRxutiL2nGvk4qBkf/Eox0gtBU=
Subject key identifier:   E7:DB:68:67:92:AF:3B:A5:7C:1F:F1:90:CB:AB:F1:4A:C5:E0:B6:6A
Authority key identifier: D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23
Certificate issuer:       /CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
Certificate serial:       5B392093573DFB2483C6F8F6ABF0C64FE4BDAFC2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.mft
Manifest number:          43
Signing time:             Mon 15 Apr 2024 11:23:02 +0000
Manifest this update:     Mon 15 Apr 2024 11:18:02 +0000
Manifest next update:     Tue 16 Apr 2024 14:59:02 +0000
Files and hashes:         1: D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.crl (hash: c0nIOBUCnokgfEkMBUnKs8SuuiCe+/eb07x1eKporNc=)
                          2: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: YAtqrVV+xg88hkgL0aYqNplCb5PxWZqzL/yIr1XmROg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:39:20:93:57:3d:fb:24:83:c6:f8:f6:ab:f0:c6:4f:e4:bd:af:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
        Validity
            Not Before: Apr 15 11:18:02 2024 GMT
            Not After : Apr 16 14:59:02 2024 GMT
        Subject: CN=E7DB686792AF3BA57C1FF190CBABF14AC5E0B66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:e2:d5:f8:d7:4c:62:78:9d:08:19:19:2e:
                    90:b5:28:7c:49:f9:9b:a3:ef:58:ff:8b:1c:0d:1a:
                    6f:95:d7:0c:16:11:3a:f0:88:b9:d9:f7:cb:4a:f2:
                    b1:17:94:44:f4:67:5a:cb:63:a9:74:9c:42:b2:a7:
                    67:40:0a:65:04:6e:ad:c1:fe:79:64:69:89:9b:73:
                    56:1b:88:c8:fe:98:f1:83:a6:e5:2c:6f:8c:e2:02:
                    b6:5c:92:ff:48:d0:05:ce:2c:6f:1b:b1:c3:38:ca:
                    20:28:f2:94:81:5d:a2:b6:0a:ce:f2:72:6a:2e:14:
                    bc:6d:69:0e:40:91:50:f6:44:ca:de:7e:5c:d8:0e:
                    ee:8c:5c:0c:e8:13:4a:1c:d3:a4:3a:80:0f:5f:02:
                    6e:41:60:f4:f8:30:52:54:9d:08:49:e5:0e:d7:49:
                    b3:5e:f5:5e:da:dd:cb:6b:5f:57:94:49:73:f1:c3:
                    86:14:ab:ac:0f:b7:47:e5:2c:63:30:68:2b:01:11:
                    3f:57:68:05:77:d9:80:e3:0a:50:a9:60:9a:71:92:
                    2b:54:3e:8d:3e:e6:95:86:18:de:03:de:df:3e:86:
                    23:22:18:6d:b5:74:dc:81:20:1d:05:15:ff:26:08:
                    3a:bd:c5:a3:10:a9:10:1b:7b:c2:be:45:d7:75:a3:
                    68:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:68:67:92:AF:3B:A5:7C:1F:F1:90:CB:AB:F1:4A:C5:E0:B6:6A
            X509v3 Authority Key Identifier:
                keyid:D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:5d:d1:9d:57:dc:ba:aa:55:1f:fa:87:98:13:64:72:28:
         df:e8:93:a8:40:4e:d7:e2:3b:30:34:e1:54:fa:2d:28:50:03:
         7b:e5:3c:05:6f:82:3b:c4:30:0d:a5:36:b2:d1:92:09:ca:67:
         bf:a4:07:7d:86:4a:5c:40:ea:36:cf:5c:12:96:4c:d2:02:14:
         ec:84:9b:69:b7:db:0a:4b:46:be:59:95:ab:63:81:68:a7:f6:
         74:ef:72:5a:2f:db:2d:3f:a2:3b:ea:65:0c:cd:26:83:d5:2e:
         72:83:77:55:02:b5:b0:56:de:41:cc:29:64:39:3b:65:dd:8f:
         2c:f0:ab:57:5d:86:bb:e7:35:b8:0d:33:fb:a0:d0:e9:0f:79:
         75:d7:98:55:ce:f9:b1:c1:00:0d:10:bf:36:93:f9:c6:46:34:
         c1:65:e9:3b:7a:55:4d:73:67:05:52:fb:57:70:3d:62:ca:09:
         54:e9:cc:f0:4a:21:c5:71:16:14:16:5b:ff:22:eb:2b:0c:75:
         d8:0d:84:1c:14:0b:b6:f0:e1:d6:be:40:ad:eb:60:29:47:6a:
         0e:50:91:a8:d3:d4:28:6d:24:b6:bb:4c:18:6d:33:b2:0a:a5:
         d9:24:23:47:eb:3f:72:a6:c0:31:a2:0c:04:55:ce:ac:1d:57:
         79:7e:6e:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUWzkgk1c9+ySDxvj2q/DGT+S9r8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDMjlGNDlDRDVDQTBDNUUzOTZFMzVFQzJGMUQzMzY1
QTcwNDkyMzAeFw0yNDA0MTUxMTE4MDJaFw0yNDA0MTYxNDU5MDJaMDMxMTAvBgNV
BAMTKEU3REI2ODY3OTJBRjNCQTU3QzFGRjE5MENCQUJGMTRBQzVFMEI2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWceLV+NdMYnidCBkZLpC1KHxJ
+Zuj71j/ixwNGm+V1wwWETrwiLnZ98tK8rEXlET0Z1rLY6l0nEKyp2dACmUEbq3B
/nlkaYmbc1YbiMj+mPGDpuUsb4ziArZckv9I0AXOLG8bscM4yiAo8pSBXaK2Cs7y
cmouFLxtaQ5AkVD2RMreflzYDu6MXAzoE0oc06Q6gA9fAm5BYPT4MFJUnQhJ5Q7X
SbNe9V7a3ctrX1eUSXPxw4YUq6wPt0flLGMwaCsBET9XaAV32YDjClCpYJpxkitU
Po0+5pWGGN4D3t8+hiMiGG21dNyBIB0FFf8mCDq9xaMQqRAbe8K+Rdd1o2h9AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU59toZ5KvO6V8H/GQy6vxSsXgtmowHwYDVR0j
BBgwFoAU18KfSc1coMXjluNewvHTNlpwSSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy
VW0vMC9EN0MyOUY0OUNENUNBMEM1RTM5NkUzNUVDMkYxRDMzNjVBNzA0OTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3QzI5RjQ5Q0Q1Q0EwQzVF
Mzk2RTM1RUMyRjFEMzM2NUE3MDQ5MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMC9E
N0MyOUY0OUNENUNBMEM1RTM5NkUzNUVDMkYxRDMzNjVBNzA0OTIzLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATQxd0Z1X3LqqVR/6h5gTZHIo3+iTqEBO1+I7MDThVPotKFADe+U8BW+CO8Qw
DaU2stGSCcpnv6QHfYZKXEDqNs9cEpZM0gIU7ISbabfbCktGvlmVq2OBaKf2dO9y
Wi/bLT+iO+plDM0mg9UucoN3VQK1sFbeQcwpZDk7Zd2PLPCrV12Gu+c1uA0z+6DQ
6Q95ddeYVc75scEADRC/NpP5xkY0wWXpO3pVTXNnBVL7V3A9YsoJVOnM8EohxXEW
FBZb/yLrKwx12A2EHBQLtvDh1r5AretgKUdqDlCRqNPUKG0ktrtMGG0zsgql2SQj
R+s/cqbAMaIMBFXOrB1XeX5uRw==
-----END CERTIFICATE-----